Signalis
sign in--:--:--UTC
CVEs

CVE-2026-5430

exploited in the wild☆ pin
CVSS
10.0
Reports
4
First seen
Sep 16, 2026
Last seen
Sep 25, 2026
Affected product

WSO2 API Manager 4.1.0–4.6.0, WSO2 API Control Plane 4.5.0–4.6.0, WSO2 Traffic Manager 4.5.0–4.6.0, WSO2 Universal Gateway 4.5.0–4.6.0

Recent reports

Critical

CISA warns of SharePoint, WSO2, Adobe Commerce flaws exploited in attacks

Bleeping ComputerCritical

WSO2 and Adobe Commerce Flaws Added to CISA KEV Catalog with Active Exploitation

The Hacker NewsHigh

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesCritical

WSO2 API Manager JWT Bypass Vulnerability (CVE-2026-5430) Under Active Exploitation

The Hacker News

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans